CWE-200
10,404 CVEs • Abstraction: Class • Likelihood of Exploit: High
Exposure of Sensitive Information to an Unauthorized Actor
The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.
CVEs (10,404)
CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS |
|---|
11Apple CiscoHp+8 more14Aix BsdosHp Ux+11 moreMay 28, 2026 Aug 1, 1997 N/A· v4 4.0 MEDIUM· v3 2.1 LOW· v2 ICMP information such as (1) netmask and (2) timestamp is allowed from arbitrary hosts. |
IRIX fam service allows an attacker to obtain a list of all files on the server. |
An SNMP community name is the default (e.g. public), null, or missing. |
1Microsoft 2Windows 2000 Windows NtMay 28, 2026 Jan 1, 1997 N/A· v4 9.1 CRITICAL· v3 7.5 HIGH· v2 IP forwarding is enabled on a machine which is not a router or firewall. |